// page · 1FCD2815 // 2026-10-22

Privacy Policy

Last updated: October 28, 2026

1. Data controller

The person responsible for processing your personal data is Luis Jaramillo (“Lucho”), an individual and the owner of itslucho.com.

  • Address: Calle 118 # 19-52, Of. 206 EVA, Edificio Acocentro 118, Santa Bárbara Occidental, Usaquén, Bogotá D.C., Colombia, postal code 110111.
  • Email: [email protected]. Use it for questions, requests and anything related to privacy.

2. What data I collect and why

This site has no forms, user accounts, comments, analytics or advertising tools. I only process personal data in these cases:

  • If you email me: your name, your email address and whatever you tell me. I use them to reply and, if we reach an agreement, to provide the service.
  • If you message me on Telegram (@itslucho_com): your name or username, whatever Telegram shows from your profile and whatever you tell me. I use them to reply, just like email. Regular Telegram chats are not end-to-end encrypted: for sensitive matters, use email with PGP.
  • If you book a consulting session: the booking happens on Cal.com and the payment on PayPal. I receive your name, your email, the session date, anything you write when booking and the payment confirmation. I never receive or store your card or PayPal account details. I use this data to hold the session, send you the video call link, handle rescheduling and apply the first-session credit if we start a project.
  • If we work on a project together: the data needed for the proposal, the contract, invoicing and my accounting and tax obligations.
  • When you visit the site: the server logs technical data (IP address, browser, page visited, date and time) for security and to keep the site running. I do not use it to identify you or to build profiles.

I do not sell, rent or share your data. I do not send you marketing without your permission. I do not collect sensitive data or data from minors.

3. Consent

By emailing me or booking a session, you authorize me to process your data for the purposes in this policy. You can withdraw that consent at any time (section 7), except where I must keep the data because of a legal or contractual obligation.

4. Third-party services

The site and my services rely on these providers. Each one processes data under its own privacy policy:

  • OVHcloud (Canada): dedicated server that hosts the site.
  • Cal.com: session booking.
  • PayPal: payments.
  • Proton Mail: email.
  • Telegram: messaging, if you choose to write to me there.
  • YouTube (Google): videos inside the guides. They are embedded in privacy-enhanced mode (youtube-nocookie.com), so YouTube does not store cookies in your browser until you play the video. Once you play it, Google’s privacy policy applies.

Links to YouTube, Instagram, GitHub and LinkedIn take you to those sites, which have their own policies. Some of these providers operate outside Colombia (for example in Canada and the United States), so your data may be transferred to other countries. I only use providers that apply appropriate safeguards.

5. Cookies

This site does not use analytics, advertising or tracking cookies, and it does not share your browsing with social networks.

  • Visiting the site does not store cookies in your browser.
  • If you choose the light or dark theme, your browser keeps that preference in its local storage (localStorage). It is not a cookie, it is never sent to the server, and it is removed if you clear this site’s data in your browser.
  • If you play a YouTube video, YouTube may store cookies or similar data (section 4).
  • WordPress uses cookies only when the site administrator logs in.

That is why the site shows no cookie banner.

6. How long I keep data

  • Emails: for as long as the conversation lasts and up to 2 years after, unless you ask me to delete them sooner.
  • Bookings, payments and invoicing: for as long as Colombian accounting and tax rules require (up to 10 years for accounting records).
  • Server logs: for a limited time, only for security purposes.

7. Your rights

Under Colombian law (Law 1581 of 2012), you can:

  • Know, update and correct your data.
  • Ask for proof of the consent you gave me.
  • Know how your data has been used.
  • Withdraw your consent or ask me to delete your data, when there is no legal or contractual duty to keep it.
  • Access your data free of charge.
  • File a complaint with the Superintendence of Industry and Commerce (SIC) of Colombia, after first making your request to me.

If you live in the European Union or another country with its own data protection law, you can also exercise the rights that law gives you (for example, to object to processing or to ask for data portability).

8. How to exercise your rights

Email [email protected] with the subject “Personal data”. Include your name, your request and an email address where I can reply. I may ask for information to verify your identity.

  • Questions: I reply within 10 business days. If I need more time, I will tell you why and reply within 5 more business days.
  • Requests (correction, update, deletion or withdrawal of consent): I reply within 15 business days. If I need more time, I will tell you why and reply within 8 more business days.

9. Security

The site runs over HTTPS with security headers. Administrative access is protected with hardware security keys. If your message is sensitive, you can encrypt it with my PGP public key. No system is 100% secure, but I apply reasonable measures to protect your data.

10. Changes to this policy

If I change this policy, I will publish the new version on this page with its date. If the change is significant, I will let people who have an active relationship with me know.